05aa82c819f371f5065bd04ccca6f97957a2930e1eec5eb869e0a4420fb04bb6

Sharing

Copy URL

Twitter E-mail

General

Target

05aa82c819f371f5065bd04ccca6f97957a2930e1eec5eb869e0a4420fb04bb6
Size

1.9MB
MD5

ca0011efef1a21dd0e4c7f9a472b6ae5
SHA1

c7c1238e9f8e874d8c7a78f535a946d00339db3a
SHA256

05aa82c819f371f5065bd04ccca6f97957a2930e1eec5eb869e0a4420fb04bb6
SHA512

ff6aaa6856961d142499bd3e8bfd1fe2336b02bdc7efbdfb3dc779dc16db5832217c1f92da834f9bb864d37bcb7ac113a4ec6f451c3f40ea842ba4de37f65d5c
SSDEEP

6144:OIfbfTbpOCVXyt576GKRemW5BYBzmhOce9O3e2pBBK6kVnC+jHb:fbwazGKAJ5BGv7B2NK6KlHb

Score

1^/10

Malware Config

Signatures

Files

05aa82c819f371f5065bd04ccca6f97957a2930e1eec5eb869e0a4420fb04bb6
.exe windows:1 windows x86 arch:x86

7ec4dd94be3f17da3d743cee1a27e955

Code Sign

6f:ea:f3:0e:71:a0:c1:5a:be:e1:dd:c5:62:e1:9d:43
Certificate

Issuer

CN=ESTPLXUCPOJUUZYPPZ

Not Before

14-11-2020 05:50

Not After

31-12-2039 23:59

Subject

CN=ESTPLXUCPOJUUZYPPZ

Extended Key Usages

ExtKeyUsageCodeSigning

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

23-10-2020 00:00

Not After

22-01-2032 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-05-2019 00:00

Not After

18-01-2038 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

67:31:e6:0c:8e:76:38:99:11:eb:01:ec:7c:9a:8a:75:1a:29:dc:56:d1:6a:ca:2d:7c:6a:2e:73:36:a1:eb:84
Signer

Actual PE Digest

67:31:e6:0c:8e:76:38:99:11:eb:01:ec:7c:9a:8a:75:1a:29:dc:56:d1:6a:ca:2d:7c:6a:2e:73:36:a1:eb:84

Digest Algorithm

sha256

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
VirtualAllocEx
GetModuleHandleA
CloseHandle
CreateEventA
CreateFileA
DeviceIoControl
GetCurrentProcess
GetCurrentThread
GetDriveTypeA
GetVersionExA
ResetEvent
SetPriorityClass
SetThreadPriority
WaitForSingleObject
SetConsoleTextAttribute
SetLocaleInfoW
FindAtomA
HeapAlloc
Heap32ListNext
GetFileSizeEx
VirtualQuery
GetTempPathW
GlobalLock
GetPriorityClass
GetEnvironmentStrings
GetPrivateProfileSectionA
GetProcessIoCounters
OpenJobObjectW
VerifyVersionInfoA
GetProcessWorkingSetSize
GetCommConfig
GetFileAttributesW
DebugActiveProcess
SetWaitableTimer
ConvertThreadToFiber
FindFirstFileA
GlobalReAlloc
TlsAlloc
SleepEx
GetNumberFormatW
GetDateFormatW
GetEnvironmentVariableW
GetStartupInfoA

user32

LoadIconA
DestroyIcon
GetMessageTime
GetCaretBlinkTime
CloseWindowStation
IsCharUpperA
GetCursor
GetCapture
GetMenuContextHelpId
IsCharAlphaNumericW
VkKeyScanA
ReleaseCapture
CharUpperA
DrawMenuBar
GetActiveWindow
IsCharAlphaNumericA
FlashWindow
OpenIcon
DrawTextExW
CreateIcon
LoadMenuIndirectW
EnumDisplaySettingsExA
ModifyMenuA
WaitForInputIdle
SetDeskWallpaper
GetKeyNameTextW
SetUserObjectSecurity
GetMonitorInfoA
CreateMDIWindowW
EnumWindows
DrawFrame
EnumThreadWindows
BeginPaint
EnumClipboardFormats
OpenClipboard
CheckRadioButton
InsertMenuA
DlgDirListComboBoxW
GetProcessWindowStation
OpenWindowStationW
GetTabbedTextExtentA
TileChildWindows
CallWindowProcA
AppendMenuA
FrameRect
GetWindowWord
AllowSetForegroundWindow
TileWindows
CopyIcon
RegisterHotKey
OpenInputDesktop
CreateWindowExA
FillRect
SetFocus
FindWindowA
PostQuitMessage
InvalidateRect
CloseDesktop
CreateMenu
GetInputState
GetInputDesktop
ChangeDisplaySettingsExW
CreatePopupMenu
DispatchMessageW
LoadIconW
LoadCursorW
RemovePropW
SetWindowPlacement
IsZoomed
GetWindowPlacement
IsIconic
SetPropW
GetPropW
ShowWindow
SetForegroundWindow
GetForegroundWindow
ShowOwnedPopups
PostMessageW
SetTimer
MoveWindow
MapWindowPoints
GetWindowRect
PtInRect
GetWindowLongW
GetAncestor
EnumChildWindows
UpdateLayeredWindow
SetActiveWindow
DestroyMenu
KillTimer
GetCursorPos
EnableWindow
GetDlgItem
SetRect
GetClassNameW
GetClientRect
GetWindowTextW
SetWindowTextW
SendMessageW
WindowFromPoint
GetAsyncKeyState
DialogBoxParamW
RedrawWindow
BringWindowToTop
GetTopWindow
MessageBoxW
UnregisterHotKey
EndDialog
DefWindowProcW
IsWindow
GetWindowThreadProcessId
TrackPopupMenu
CheckMenuItem
EnableMenuItem
AppendMenuW
SetCapture
SetWindowLongW
UnhookWindowsHookEx
DestroyWindow
RegisterShellHookWindow
SetWindowsHookExW
RegisterClipboardFormatW
CreateWindowExW
RegisterWindowMessageW
GetDC
ReleaseDC
GetWindowRgn
GetDesktopWindow
GetIconInfo
LookupIconIdFromDirectoryEx
CreateIconFromResourceEx
FindWindowW
SystemParametersInfoW
GetWindow
GetParent
SendDlgItemMessageW
IsWindowVisible
TranslateMessage
TranslateAcceleratorW
GetMessageW
LoadAcceleratorsW
LoadImageW
GetSystemMetrics
EnumDisplayMonitors
SetWindowPos
RegisterClassExW
GetKeyboardType
LoadStringA
MessageBoxA
CharNextA
WinHelpA
WaitMessage
UpdateWindow
UnregisterClassA
TranslateMDISysAccel
SystemParametersInfoA
ShowScrollBar
ShowCursor
SetWindowsHookExA
SetWindowTextA
SetWindowLongA
SetScrollRange
SetScrollPos
SetScrollInfo
SetPropA
SetParent
SetMenuItemInfoA
SetMenu
SetCursor
SetClipboardData
SetClassLongA
SendMessageA
ScrollWindow
ScreenToClient
RemovePropA
RemoveMenu
RegisterWindowMessageA
RegisterClipboardFormatA
RegisterClassA
PostMessageA
PeekMessageA
OffsetRect
OemToCharA
MsgWaitForMultipleObjects
MessageBeep
MapVirtualKeyA
LoadKeyboardLayoutA
LoadCursorA
LoadBitmapA
IsWindowEnabled
IsRectEmpty
IsDialogMessageA
IsClipboardFormatAvailable
IsChild
IntersectRect
InsertMenuItemA
InflateRect
GetWindowTextA
GetWindowLongA
GetWindowDC
GetSystemMenu
GetSysColorBrush
GetSysColor
GetSubMenu
GetScrollRange
GetScrollPos
GetScrollInfo
GetPropA
GetMessagePos
GetMenuStringA
GetMenuState
GetMenuItemInfoA
GetMenuItemID
GetMenuItemCount
GetMenu
GetLastActivePopup
GetKeyboardState
GetKeyboardLayoutList
GetKeyboardLayout
GetKeyState
GetKeyNameTextA
GetFocus
GetDCEx
GetClipboardData
GetClassNameA
GetClassInfoA
EqualRect
EndPaint
EndDeferWindowPos
EnableScrollBar
EmptyClipboard
DrawTextA
DrawIconEx
DrawIcon
DrawFrameControl
DrawFocusRect
DrawEdge
DispatchMessageA
DestroyCursor
DeleteMenu
DeferWindowPos
DefWindowProcA
DefMDIChildProcA
DefFrameProcA
CloseClipboard
ClientToScreen
ChildWindowFromPoint
CallNextHookEx
BeginDeferWindowPos
CharLowerBuffA
CharLowerA
CharUpperBuffA
CharToOemA
AdjustWindowRectEx
ActivateKeyboardLayout

gdi32

CreateSolidBrush
AddFontResourceA
GetEnhMetaFileA
RealizePalette
GetTextCharacterExtra
CloseEnhMetaFile
SaveDC
CancelDC
GetTextColor
CloseMetaFile
DeleteColorSpace
GetGraphicsMode
CreatePatternBrush
GetStretchBltMode
GetDCPenColor
CreateHalftonePalette
FlattenPath
GetEnhMetaFileBits
GetStockObject
SetEnhMetaFileBits
EngTransparentBlt
PlayEnhMetaFileRecord
CreatePalette
GetTextMetricsA
PATHOBJ_bEnum
EngGetCurrentCodePage
CreateEllipticRgn
STROBJ_bEnumPositionsOnly
GdiEntry10
CreateRectRgn
GetDeviceCaps
BitBlt
CreateCompatibleDC
CreateDIBSection
DeleteDC
SelectObject
DeleteObject
GetObjectW

advapi32

RegOpenKeyW
RegQueryValueExA

shell32

SHGetFolderPathW
ShellHookProc
SHGetIconOverlayIndexA
SHGetSpecialFolderPathA
DragQueryPoint
SHGetDiskFreeSpaceExW
ExtractIconExA
SHGetPathFromIDListW
DoEnvironmentSubstW
SHGetIconOverlayIndexW
SHInvokePrinterCommandW

shlwapi

StrRStrIA
StrChrIA
StrChrW

comctl32

ImageList_Create
ImageList_Add

msvcrt

_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_onexit
__dllonexit
_controlfp

Sections

.text
Size: 346KB - Virtual size: 345KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 981KB - Virtual size: 981KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 618KB - Virtual size: 618KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

7ec4dd94be3f17da3d743cee1a27e955

Code Sign

6f:ea:f3:0e:71:a0:c1:5a:be:e1:dd:c5:62:e1:9d:43Certificate

Extended Key Usages

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6bCertificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

67:31:e6:0c:8e:76:38:99:11:eb:01:ec:7c:9a:8a:75:1a:29:dc:56:d1:6a:ca:2d:7c:6a:2e:73:36:a1:eb:84Signer

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

shlwapi

comctl32

msvcrt

Sections

.text Size: 346KB - Virtual size: 345KB

.rdata Size: 981KB - Virtual size: 981KB

.data Size: 618KB - Virtual size: 618KB

6f:ea:f3:0e:71:a0:c1:5a:be:e1:dd:c5:62:e1:9d:43
Certificate

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

67:31:e6:0c:8e:76:38:99:11:eb:01:ec:7c:9a:8a:75:1a:29:dc:56:d1:6a:ca:2d:7c:6a:2e:73:36:a1:eb:84
Signer

.text
Size: 346KB - Virtual size: 345KB

.rdata
Size: 981KB - Virtual size: 981KB

.data
Size: 618KB - Virtual size: 618KB